Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
File:                     FivG9rrBQqA6uxp62RaQaD8DpNw.mft (raw, json)
Hash identifier:          9AnXHqwtH0zYYhJPHWh/OfEa5pciXQZ99fPgkca1gak=
Subject key identifier:   8B:DB:CB:F0:7F:49:EC:75:8B:5C:53:96:CF:84:05:14:FD:0C:2D:E2
Authority key identifier: 16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC
Certificate issuer:       /CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
Certificate serial:       0196B9A3ED8172FC6104BF89533CF0AE012A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
Manifest number:          0F62
Signing time:             Sat 10 May 2025 10:00:50 +0000
Manifest this update:     Sat 10 May 2025 10:00:50 +0000
Manifest next update:     Sun 11 May 2025 10:00:50 +0000
Files and hashes:         1: FivG9rrBQqA6uxp62RaQaD8DpNw.crl (hash: h7Jg4ctL+NFgh1DAP24sGJ4Dfnn5pTMVLppTDckrlfM=)
                          2: ZuMY1XotbixRHp-2hF8zeuwVNac.roa (hash: cWcV3AJ97upwcCtlMiiXPFQ1J792OYZqXfGtYafZgg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:a3:ed:81:72:fc:61:04:bf:89:53:3c:f0:ae:01:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
        Validity
            Not Before: May 10 10:00:50 2025 GMT
            Not After : May 11 10:00:50 2025 GMT
        Subject: CN=8bdbcbf07f49ec758b5c5396cf840514fd0c2de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:19:47:2b:54:e8:32:dd:9b:10:e6:c6:21:e7:
                    ca:4b:bf:46:bb:a3:77:88:7a:4f:f9:bb:62:5c:8d:
                    f6:d6:74:2d:ae:88:7b:b7:49:7e:86:11:15:76:d9:
                    29:1d:3b:9b:7a:4f:e0:4c:9d:99:36:27:36:40:fd:
                    51:4f:19:1a:db:56:98:dc:fd:b2:20:b1:38:1a:cd:
                    e3:b0:79:60:33:fb:52:76:91:7e:76:ad:25:af:22:
                    3d:0e:be:4f:f3:97:15:d9:57:aa:70:18:9d:da:d6:
                    28:00:ed:f4:c3:79:8c:22:f0:18:6c:ef:bb:67:f7:
                    ab:8f:89:3c:df:c4:de:10:80:42:5b:e0:44:e3:a7:
                    1a:9c:bd:49:b9:ff:d6:77:55:07:5b:fa:6b:a5:ae:
                    1f:90:f0:9f:15:ff:9b:c7:0a:07:47:72:94:ab:f5:
                    1e:7a:f0:3f:d3:36:a0:30:5e:23:44:3d:6c:dd:d5:
                    43:cb:38:f9:ca:7b:52:df:73:b0:53:ca:51:a5:99:
                    99:5e:e8:1e:68:8b:88:48:81:d4:ca:9b:9a:76:8d:
                    c3:2b:b0:e8:16:3f:99:a6:f4:a0:b9:49:26:12:5d:
                    b3:02:02:fb:61:33:bd:e2:67:97:5b:50:8c:73:47:
                    c5:a4:39:45:02:e5:75:30:57:0d:b2:93:23:a6:3a:
                    91:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DB:CB:F0:7F:49:EC:75:8B:5C:53:96:CF:84:05:14:FD:0C:2D:E2
            X509v3 Authority Key Identifier:
                keyid:16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:47:a1:8d:7c:f6:bc:50:90:54:f4:7c:d8:5e:53:f0:d7:a0:
         92:27:cc:c6:76:72:f7:af:b4:dc:ee:2b:d1:21:f9:54:1c:ce:
         77:89:18:e5:98:22:04:8b:41:07:bd:5b:e3:56:d3:6a:08:ab:
         21:46:b9:33:de:d0:c3:aa:d4:05:82:8c:cd:2d:da:50:e3:49:
         1d:75:79:10:6b:6c:e4:ef:fa:44:75:12:32:da:03:ae:8b:0e:
         5a:a7:f8:c0:7b:60:65:76:16:95:fe:f6:72:b2:c8:32:db:3c:
         f9:7e:70:91:cc:19:b5:e0:3c:87:9b:64:53:73:29:a2:46:44:
         a8:38:91:0b:fa:2f:0a:0b:13:fb:30:17:5c:54:8e:ed:48:71:
         67:54:a1:71:6f:fa:2a:36:63:ad:68:66:09:ca:29:c7:3d:95:
         1f:12:7a:b3:0e:70:47:eb:c8:64:bd:f3:4f:42:60:18:57:7c:
         f5:55:96:a7:32:9a:90:9e:95:9e:d1:6a:f5:6e:da:dc:98:e7:
         76:ae:1a:cf:6f:f1:ef:c9:20:10:2e:6f:7f:7d:3c:75:f7:34:
         f5:0e:3a:33:c7:07:08:68:2a:90:a6:e5:8e:e1:eb:69:9c:30:
         56:0a:dd:91:39:30:eb:cf:af:f7:39:3e:03:87:1a:b8:87:fa:
         59:e3:59:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:44:47 2025 by rpki-client